How do they match: Digital Forensics Analysts

  • Conduct investigations on computer-based crimes establishing documentary or physical evidence, such as digital media and logs associated with cyber intrusion incidents. Analyze digital evidence and investigate computer security incidents to derive information in support of system and network vulnerability mitigation. Preserve and present computer-related evidence in support of criminal, fraud, counterintelligence, or law enforcement investigations.

  • Create system images or capture network settings from information technology environments to preserve as evidence.
  • Identify or develop reverse-engineering tools to improve system capabilities or detect vulnerabilities.
  • Perform forensic investigations of operating or file systems.
  • Write technical summaries to report findings.

  • Analyze security of systems, network, or data.
  • Compile technical information or documentation.
  • Develop technical methods or processes.
  • Recommend changes to improve computer or information systems.